General

  • Target

    5cb8d314be99be88095641434566b6c5_JaffaCakes118

  • Size

    14.2MB

  • MD5

    5cb8d314be99be88095641434566b6c5

  • SHA1

    7eca5622c9869db44fcdc2fc580bb6af22abf391

  • SHA256

    5970f442a2883a38b259dd0f54f103729057c7f50df6f2a66c87a9aef46e2352

  • SHA512

    20f63c4925d73145b618594cae1b872792df159ed6436cc7cea55fe5edefb8c32d6390b0ed461af0cee9669a5c2ea091dfdc9e179c63793b38b6ebfa95719476

  • SSDEEP

    393216:EOyWzMz2vStAFUGtWfOh4QxM8jtC0N3Dja53z:fyocQS5Gos4p8jtCs+x

Score
3/10

Malware Config

Signatures

  • Unsigned PE 90 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 5cb8d314be99be88095641434566b6c5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $0/DSCore100.dll
    .dll windows:5 windows x86 arch:x86

    675dac84f9f4a65b09e912e5d03bf528


    Headers

    Imports

    Exports

    Sections

  • $0/DSCore90.dll
    .dll windows:5 windows x86 arch:x86

    7bddf339db0260adae542e373bce862d


    Headers

    Imports

    Exports

    Sections

  • $0/DSCore92.dll
    .dll windows:5 windows x86 arch:x86

    55a1d977ecab54d30d762fa59d99ffde


    Headers

    Imports

    Exports

    Sections

  • $0/DSCore93.dll
    .dll windows:5 windows x86 arch:x86

    8f530b63844f1f90d145f34e5583ca36


    Headers

    Imports

    Exports

    Sections

  • $0/DSImage100.dll
    .dll windows:5 windows x86 arch:x86

    98e3eac3b822427870ccdcc05c235db5


    Headers

    Imports

    Exports

    Sections

  • $0/DSImage90.dll
    .dll windows:5 windows x86 arch:x86

    60ad71f42de3010c84dd06ea17617d4f


    Headers

    Imports

    Exports

    Sections

  • $0/DSImage92.dll
    .dll windows:5 windows x86 arch:x86

    82125388df950d2b590ebcbfacba4ebf


    Headers

    Imports

    Exports

    Sections

  • $0/DSImage93.dll
    .dll windows:5 windows x86 arch:x86

    2a9d9fcdeed48fa961d7fa973bd9b1f5


    Headers

    Imports

    Exports

    Sections

  • $0/DSSkin100.dll
    .dll windows:5 windows x86 arch:x86

    27eb2319b764a62fbae2d302a962df01


    Headers

    Imports

    Exports

    Sections

  • $0/DSSkin90.dll
    .dll windows:5 windows x86 arch:x86

    b68a2bf0053bd0de96e94db733591377


    Headers

    Imports

    Exports

    Sections

  • $0/DSSkin92.dll
    .dll windows:5 windows x86 arch:x86

    b68a2bf0053bd0de96e94db733591377


    Headers

    Imports

    Exports

    Sections

  • $0/DSSkin93.dll
    .dll windows:5 windows x86 arch:x86

    4c6971098d2821f1ad110a12d9b08450


    Headers

    Imports

    Exports

    Sections

  • $0/Idle100.dll
    .dll windows:5 windows x86 arch:x86

    e3107592f649ed37e8ea1b0246591999


    Headers

    Imports

    Exports

    Sections

  • $0/Idle90.dll
    .dll windows:5 windows x86 arch:x86

    5c134048e1b8f2308e8f1cfd5350bdee


    Headers

    Imports

    Exports

    Sections

  • $0/Idle92.dll
    .dll windows:5 windows x86 arch:x86

    2b9634b47c1e47e3d98fd27f0a143c6f


    Headers

    Imports

    Exports

    Sections

  • $0/Idle93.dll
    .dll windows:5 windows x86 arch:x86

    dcaab47a458aa03781a63953e4869873


    Headers

    Imports

    Exports

    Sections

  • $0/Utility100.dll
    .dll windows:5 windows x86 arch:x86

    adf93e6c58f72357e50913a19c3440ea


    Headers

    Imports

    Exports

    Sections

  • $0/Utility90.dll
    .dll windows:5 windows x86 arch:x86

    6c087c81e9676286e9a4d01a1c0da4ce


    Headers

    Imports

    Exports

    Sections

  • $0/Utility92.dll
    .dll windows:5 windows x86 arch:x86

    9e1a4945dd416ec1b51558f49f734d3f


    Headers

    Imports

    Exports

    Sections

  • $0/Utility93.dll
    .dll windows:5 windows x86 arch:x86

    c66380877477d39875ee85f019a6481b


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSCore100.dll
    .dll windows:5 windows x64 arch:x64

    6c4d48c34bd5ef9bf76a1cc8ffac61f9


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSCore90.dll
    .dll windows:5 windows x64 arch:x64

    6bb5aeb657e89ed3bdebe16c3a46bc03


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSCore92.dll
    .dll windows:5 windows x64 arch:x64

    ff8b6de9d99d0e61bc67fae318fb0492


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSCore93.dll
    .dll windows:5 windows x64 arch:x64

    ff8b6de9d99d0e61bc67fae318fb0492


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSImage100.dll
    .dll windows:5 windows x64 arch:x64

    c2ce06eafde18ce61f88b35c4205c516


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSImage90.dll
    .dll windows:5 windows x64 arch:x64

    11bd0417f3d4a9a1789afa9e76d57261


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSImage92.dll
    .dll windows:5 windows x64 arch:x64

    6ff4e88c2b42a5e229ddf0f8df0364d5


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSImage93.dll
    .dll windows:5 windows x64 arch:x64

    5d9de31d9e27aa42a708f58d776b24bf


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSSkin100.dll
    .dll windows:5 windows x64 arch:x64

    7bef610676acf12d0875764a534efdce


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSSkin90.dll
    .dll windows:5 windows x64 arch:x64

    73f4dc9d5a9c02cda110e4f826dbc0ba


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSSkin92.dll
    .dll windows:5 windows x64 arch:x64

    2750c8be6ef804d955ae9a376bc9fe97


    Headers

    Imports

    Exports

    Sections

  • $0/x64/DSSkin93.dll
    .dll windows:5 windows x64 arch:x64

    c9da7b247cdc47779d8ca0c3932903ac


    Headers

    Imports

    Exports

    Sections

  • $0/x64/FreeImage.dll
    .dll windows:5 windows x64 arch:x64

    dd077920d6995dd42a0a867fe76c9f21


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Idle100.dll
    .dll windows:5 windows x64 arch:x64

    b6057b04bcf8ee14daf195d06f978c91


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Idle90.dll
    .dll windows:5 windows x64 arch:x64

    c28c4ac89ae190fdb2520f20f8ba55ae


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Idle92.dll
    .dll windows:5 windows x64 arch:x64

    a3b4270a00c338bf26bc6202094d7fc4


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Idle93.dll
    .dll windows:5 windows x64 arch:x64

    98ef6296374f9fc1294f55eeae3ee914


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Utility100.dll
    .dll windows:5 windows x64 arch:x64

    2efb5dfd0cdbf5d44c0757cdc827d88f


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Utility90.dll
    .dll windows:5 windows x64 arch:x64

    c4c227af404e2f23a89044683dfc6bf4


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Utility92.dll
    .dll windows:5 windows x64 arch:x64

    ee3da7dd9dbbbbc7800c5254b5a9f55c


    Headers

    Imports

    Exports

    Sections

  • $0/x64/Utility93.dll
    .dll windows:5 windows x64 arch:x64

    f1a076ea4a3b2d1b954a5ae6c5600e17


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/iis.ini
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $_23_/bin/Axiell.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_23_/bin/ImageCache.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_31_/bin/Axiell.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_31_/bin/ImageCache.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_40_/pt/IdleNet.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_41_/fi/IdleNet.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_42_/da/IdleNet.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_43_/el/IdleNet.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_44_/cy-GB/IdleNet.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_45_/sv/DsNetCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_46_/pt/DsNetCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_47_/fi/DsNetCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_48_/da/DsNetCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_49_/el/DsNetCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_50_/cy-GB/DsNetCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_51_/DSCore.dll
    .dll windows:4 windows x86 arch:x86

    c6ef4f8c34e10d777f2ec05ad135f6a9


    Headers

    Imports

    Exports

    Sections

  • $_51_/DSCore73.dll
    .dll windows:4 windows x86 arch:x86

    05a096cfd756d74b7e31cab33eb84671


    Headers

    Imports

    Exports

    Sections

  • $_51_/DSCore80.dll
    .dll windows:4 windows x86 arch:x86

    cfb9e98cad4205fce17d47ccc60064a8


    Headers

    Imports

    Exports

    Sections

  • $_51_/FreeImage.dll
    .dll windows:5 windows x86 arch:x86

    a1afc20d4ed28ff44e2d763d48743a69


    Headers

    Imports

    Exports

    Sections

  • $_51_/Idle.dll
    .dll windows:4 windows x86 arch:x86

    11f598ae320d2ec7626ac54c7e9ff4ca


    Headers

    Imports

    Exports

    Sections

  • $_51_/Idle.dtd
  • $_51_/Idle73.dll
    .dll windows:4 windows x86 arch:x86

    6f63bca3b537b7c456d72644298fff99


    Headers

    Imports

    Exports

    Sections

  • $_51_/Idle80.dll
    .dll windows:4 windows x86 arch:x86

    74d49af5306e10a9d2bbbd6ec23b9741


    Headers

    Imports

    Exports

    Sections

  • $_51_/Microsoft.VC90.CRT.manifest
    .xml
  • $_51_/Utility.dll
    .dll windows:4 windows x86 arch:x86

    3429bd4c16e9c48d7c7a14d763e1f48b


    Headers

    Imports

    Exports

    Sections

  • $_51_/Utility73.dll
    .dll windows:4 windows x86 arch:x86

    acc0891a5e90fa5c4cf9d55c5b21ef0c


    Headers

    Imports

    Exports

    Sections

  • $_51_/Utility80.dll
    .dll windows:4 windows x86 arch:x86

    6917a8fbdb442417b90a8be488f1f54c


    Headers

    Imports

    Exports

    Sections

  • $_51_/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $_51_/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $_51_/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/vcomp100.dll
    .dll windows:5 windows x86 arch:x86

    c80e49e03838330a5df1ad4a389497a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/x64/FreeImage.dll
    .dll windows:5 windows x64 arch:x64

    dd077920d6995dd42a0a867fe76c9f21


    Headers

    Imports

    Exports

    Sections

  • $_51_/x64/Microsoft.VC90.CRT.manifest
    .xml
  • $_51_/x64/msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/x64/msvcp90.dll
    .dll windows:5 windows x64 arch:x64

    0710c2edb6d550175f0ccfb9bf56834a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/x64/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/x64/msvcr90.dll
    .dll windows:5 windows x64 arch:x64

    78d931040351d53199b8eea44e33c764


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/x64/vcomp100.dll
    .dll windows:5 windows x64 arch:x64

    81d52978614754cc53ecd78c8eeb02b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_51_/xerces-c_2_6.dll
    .dll windows:4 windows x86 arch:x86

    9d6f9c5b70b24d92de3a5e85f5b9894a


    Headers

    Imports

    Exports

    Sections

  • $_6_/Configuration/imagecache.config
  • $_6_/Configuration/synonyms.txt
  • $_6_/Configuration/watermark.png
    .png
  • $_6_/ContentService.asmx
    .asp
  • $_6_/DatabaseList.xml
    .xml
  • $_6_/DiscoveryBroker.asmx
    .asp
  • $_6_/DiscoveryBroker2.asmx
    .asp
  • $_6_/GetImage.aspx
    .asp
  • $_6_/Global.asax
    .asp
  • $_6_/ImageTest.aspx
    .asp
  • $_6_/bin/Axiell.Calm.Api.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/Axiell.Calm.Api.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/Axiell.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/Axiell.DScribe.Api.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/Axiell.DScribe.Broker.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/CalmApi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/Catalog.xslt
    .xml
  • $_6_/bin/DiscoveryBroker.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/DsNetCore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/IdleNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/ImageCache.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/POST.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/XMLWrapper.ico
  • $_6_/bin/XmlWrapper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/bin/XmlWrapperConfig.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • $_6_/bin/sv/IdleNet.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/default.aspx
    .asp
  • $_6_/default.css
  • $_6_/help/BrokerImageCache.cs.txt
  • $_6_/help/ImageCacheExample.cs.txt
    .js
  • $_6_/help/Reference.cs.txt
  • $_6_/help/example.htm
    .html
  • $_6_/help/example_overview.htm
    .html
  • $_6_/help/example_search.htm
    .html
  • $_6_/help/example_summary.htm
    .html
  • $_6_/help/icconfig.htm
    .html
  • $_6_/help/imagecache.htm
    .html
  • $_6_/help/images/homepage.jpg
    .jpg
  • $_6_/help/images/xmlwrapperconfig.jpg
    .jpg
  • $_6_/help/index.htm
    .html
  • $_6_/images/exclamation.gif
    .gif
  • $_6_/images/tick.gif
    .gif
  • $_6_/redist/BrokerImageCache.cs
  • $_6_/redist/ImageCache.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $_6_/redist/ImageCacheExample.cs
    .js
  • $_6_/redist/Reference.cs
  • $_6_/redist/imagecache.config